Executive brief
OpenClaw is a popular automation platform used to manage messaging bots and workflows. A flaw in the QQBot streaming command allows authenticated users to change the bot's configuration without proper permission checks, bypassing security policies designed to restrict who can make such changes. An attacker with basic bot access could modify settings outside of intended administrative controls, potentially disrupting bot operations or accessing sensitive data.
Technical details
This is an authentication bypass vulnerability (CWE-290) in the QQBot streaming command component of OpenClaw. The vulnerability exists because the command lacks proper authorization checks—specifically, it does not verify explicit non-wildcard allowlist entries before permitting configuration changes. An authenticated sender can reach the affected command and mutate the QQBot streaming configuration without the required administrative permissions. The attack vector is local with low attack complexity. The practical impact depends on the operator's deployment and whether lower-trust input can reach the affected command path; in enabled configurations, it allows unauthorized modification of streaming settings outside the intended admin policy. The vulnerability was patched in version 2026.4.29.
Affected products
- OpenClaw openclaw < 2026.4.29
Timeline
- 2026-06-12: disclosed
- 2026-04-29: patched: Version 2026.4.29 contains the fix
- 2026-06-13: advisory: GHSA-r27j-fxmq-rg2q published (duplicate of GHSA-jvm4-4j77-39p6)
- 2026-08-27: other: GHSA-r27j-fxmq-rg2q withdrawn as duplicate